v0.2.2-beta

What's new

OIDC public client (PKCE SPA) support

• clientSecret is now optional when creating OIDC apps — enables SPA and native app testing with PKCE-only auth
• Public/Confidential client type shown in creation review step
• Contextual info banner when PKCE secures a public client
• Insecure-config warning when no secret and no PKCE
• Client credentials flow disabled for public clients

Windows test compatibility

• Replaced /usr/bin/sqlite3 with better-sqlite3 in test DB setup — integration and security tests now initialize on any platform
• Added probeModule() skip guards to unit tests with native dependencies (argon2, sharp, otplib, etc.) so they skip cleanly instead of crashing

Also included since v0.2.1-beta

• App grouping by IdP, tagging, and SSO detection (#60)
• Claims Diff tab fix and default team preference (#58)
• Badge label overflow fix (#56)
• Functional guides and screenshots (#54)